Domain > geotekeng.com

More information on this domain is in AlienVault OTX

Files that talk to geotekeng.com

MD5	A/V
5b88188ee5306549b12d14aabea25e4f	[Cutwail-FCWE!5B88188EE530] [Trojan.Downloader] [Backdoor.Trojan] [Kryptik.CCOH] [TROJ_SPNV.01J013] [BackDoor.Bulknet.1150] [TR/Dldr.Cutwail.BS.274] [Trj/Ransom.BB] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Trojan] [Win32/Wigon.PH] [Trojan-Downloader.Win32.Cutwail] [W32/Kryptik.BMDF] [Trojan.Win32.Kryptik.BMDF]
1aaea0a63a6123fd2dc4261fdeadc751	[W32.Sality.PE] [Win32.Sality.3] [Trojan.Win32.Krap.1!O] [W32.Sality.U] [Virus.Win32.Sality.beygb] [W32.Sality.AE] [Sality.ZHB] [Win32/Sality.AA] [PE_SALITY.RL] [Win32:SaliCode] [Win32.Sality.BL] [Win32.Sality.N] [Mal/Sality-D] [Win32.Sector.22] [Virus.Sality.Win32.20] [W32/Sality.AT] [Virus:Win32/Sality.AT] [Win32/Kashu.E] [Virus.Win32.Sality.bakc] [W32/Sality.AA] [Win32/Sality.NBA] [Virus.Win32.Sality] [Win32/Sality] [Virus.Win32.Sality.$Emu] [Backdoor.Win32.Bulknet.A]

Whois

Property	Value
Email	bwittrockcpa@hotmail.com
NameServer	: YNS2.YAHOO.COM
Created	: 2003-08-05T16:17:1
Changed	2014-07-30 00:00:00
Expires	2015-08-05 00:00:00
Registrar	MELBOURNE IT, LTD. D

DNS Resolutions

Date	IP Address
2013-11-08	216.46.49.130 (ClassC)
2024-11-07	69.167.186.166 (ClassC)

HTTP/1.1 200 OKDate: Sun, 14 Jul 2024 21:34:40 GMTServer: ApacheCache-Control: no-transform,public,max-age,s-maxageVary: Accept-Encoding,User-AgentExpires: Sun, 14 Jul 2024 21:34:40 GMTSet-Cookie: PHP

!DOCTYPE html>html>head>meta nameformat-detection contenttelephoneno>title>geotekeng.com - Geotek/title>meta charsetUTF-8>meta nametitle contentGeotek />meta nameauthor contentGES Admin />meta namedescription contentGeotek Engineering />meta namekeywords contentGeoTek, enginnering, testing, services, pfofessional service, midwest, construction materials, material testing, enviromental consulting, test test test 456 />meta nameviewport contentwidthdevice-width, initial-scale1.0 />meta namerobots contentindex, follow />base hrefhttps://geotekeng.com />link hrefhttps://geotekeng.com/templates/bootstrap/css/bootstrap.css relstylesheet>link hrefhttps://geotekeng.com/templates/css/global.css relstylesheet mediascreen>link hrefhttps://geotekeng.com/templates/pearl/css/template_css.css relstylesheet mediascreen>link hrefhttps://geotekeng.com/templates/pearl/js/jcarousel.connected-carousels.css relstylesheet mediascreen>script srchttps://geotekeng.com/modules/classes/js/jquery/jquery-1.10.0.min.js typetext/javascript>/script>script srchttps://geotekeng.com/modules/classes/js/jquery/jquery.browser.js typetext/javascript>/script>script srchttps://geotekeng.com/modules/classes/js/jquery/jquery-ui-1.9.1.custom.js typetext/javascript>/script>link relstylesheet hrefhttps://geotekeng.com/modules/classes/css/jquery/custom-theme/jquery-ui-1.8.21.custom.css>script typetext/javascript srchttps://geotekeng.com/modules/classes//js/ilightbox/src/js/jquery.requestAnimationFrame.js>/script>script typetext/javascript srchttps://geotekeng.com/modules/classes//js/ilightbox/src/js/jquery.mousewheel.js>/script>link relstylesheet hrefhttps://geotekeng.com/modules/classes/js/ilightbox/src/css/ilightbox.css>script srchttps://geotekeng.com/modules/classes/js/ilightbox/src/js/ilightbox.packed.js typetext/javascript>/script>script srchttps://geotekeng.com/modules/classes/js/bootstrapValidator/js/bootstrapValidator.js typetext/javascript>/script>link relstylesheet typetext/css hrefhttps://geotekeng.com/modules/classes/js/bootstrapValidator/css/boots

Port 443

HTTP/1.1 200 OKDate: Sun, 14 Jul 2024 21:34:41 GMTServer: ApacheCache-Control: no-transform,public,max-age,s-maxageVary: Accept-Encoding,User-AgentExpires: Sun, 14 Jul 2024 21:34:41 GMTSet-Cookie: PHP

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > geotekeng.com

Is this malicious?

Files that talk to geotekeng.com

Whois

DNS Resolutions

Port 80

Port 443